rocne / dstow

来自 GitHub 依赖图的完整解析依赖集合：8 个直接依赖与 8 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 16 个包，其中也包含从不交付的开发与测试版本固定：2 个存在已知公告，1 个为直接依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 927,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Go": 832263,
        "Shell": 74400
      },
      "pushed_at": "2026-07-26T18:32:39Z",
      "created_at": "2026-07-12T01:05:23Z",
      "owner_type": "User",
      "updated_at": "2026-07-26T18:32:38Z",
      "description": "GNU Stow, but with better ergonomics. ",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "GPL-3.0",
      "default_branch": "main",
      "license_spdx_raw": "GPL-3.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "www.rocnescribner.com",
      "name": "Rocne Scribner",
      "type": "User",
      "login": "rocne",
      "company": null,
      "location": "Redmond, WA",
      "followers": 4,
      "avatar_url": "https://avatars.githubusercontent.com/u/15507033?v=4",
      "created_at": "2015-10-31T04:12:16Z",
      "is_verified": null,
      "public_repos": 17,
      "account_age_days": 3924
    },
    "license": {
      "state": "standard",
      "spdx_id": "GPL-3.0",
      "raw_spdx": "GPL-3.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.6.2",
          "kind": "patch",
          "published_at": "2026-07-26T00:11:56Z"
        },
        {
          "tag": "v0.6.1",
          "kind": "patch",
          "published_at": "2026-07-25T23:34:55Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-07-23T14:41:08Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-07-20T13:09:48Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-07-20T01:38:30Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-07-19T22:26:29Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-07-19T20:42:44Z"
        },
        {
          "tag": "v0.1.2",
          "kind": "patch",
          "published_at": "2026-07-19T08:23:25Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2026-07-19T07:00:28Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-07-19T04:04:51Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "6ed7ea3929ddaecaa36795a64cda806566f23e62",
          "body": "…han prompt (#209)\n\nclean is the one verb that prompts inside its own transaction, so a dstow\nparked at \"remove this orphan?\" makes every concurrent write fail with exit\n3 until someone answers. Nothing dstow shipped accounted for that: the\nexit-codes page said only \"another dstow holds the ledger l\n[…]\nrompt is\nanswered. The first attempt at that check was hollow — the concurrent write\nhad no actions, so it never took the lock at all.\n\nRefs #201\n\nCo-authored-by: Claude Opus 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(manual): document that clean holds the ledger lock across its orp…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-26T18:32:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bda521e0c197e95fba152780ef11d34397fbee0d",
          "body": "…208)\n\nPROMPT-PORT.md is the durable session-start prompt for the post-v1 port\nkickoff: precondition check (v1 shipped), the §6.1 rulings as settled\ninputs, first jobs (map from 08 §7, sibling engine repo, workspace, name\nfirst), and the standing rules that bind. PROMPT.md is marked historical\nso its now-wrong constraints (no Rust, no tickets) cannot mislead a\nfuture session.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add the port-kickoff prompt and retire the evaluation prompt (#…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-26T02:50:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "79973d76f1f12a9c3f1b4d973aed24f3a5380841",
          "body": "* docs: add the Rust-port evaluation and the incidental-findings report\n\nThe evaluating session's output over the briefing pack: 08 reframes the\nengine question around the subset dstow actually consumes and the real\nshape of re-pointing the conformance harness, records every departure\nfrom the pack'\n[…]\n and #138 ruled out of scope. Findings disposition\nnoted: #195-#204 filed needs-triage, #205-#206 needs-info, addenda on\n#124/#125.\n\n\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: Rust-port evaluation and incidental-findings report (#194) (#207)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-26T02:42:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cb042174e024df5a3f8fb8ffe4e7f099b5fec0f1",
          "body": "* docs: brief a Rust-port evaluation with an indexed context pack\n\nPrep for a Fable 5 evaluation-and-planning session on porting dstow to\nRust. Evaluation only — no implementation, no wayfinder map. The pack\nfront-loads the discovery so the evaluating session spends its budget on\njudgment.\n\nSix docu\n[…]\nth its observed and ruled\ncomponents separated from the inference drawn on top.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: brief a Rust-port evaluation with an indexed context pack (#193)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-26T02:40:35Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "783c9d85d33680c9edc440498eee2b8e35162ce8",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 0.6.2 (#192)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-26T00:11:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2b28741fec6bf25216a900fbdfa624104ffe2de",
          "body": "…191)\n\nA corrupt ledger is refused by every command, and the refusal's fix: line\nnames `dstow rebuild`. But rebuild refused with the identical error — and\nits own fix: line said `dstow rebuild`, so the remedy pointed at the\ncommand that had just refused. The documented recovery was to move the\nunrea\n[…]\nles.md lumped corrupt and newer together under one\nremedy.\n\nCloses #145\n\n\nClaude-Session: https://claude.ai/code/session_01QtgYwJU3gJwnqY4TwvXL9Z\n\nCo-authored-by: Claude Opus 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(rebuild): recover from a corrupt ledger instead of refusing it (#…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-25T23:48:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d8856def4bd7d9c8046896e28fb25d47ff72bad1",
          "body": "…st yet (#190)\n\nstow --dry-run failed on a package whose effective target directory was\nmissing (\"canon_path: cannot chdir to ...\"), while the real run created\nthe directory, announced it, and stowed. The preview was more restrictive\nthan the execution — backwards, and precisely in dry-run's primary\n[…]\n the target; it\nnow states the dry-run behavior beside it.\n\nCloses #146\n\n\nClaude-Session: https://claude.ai/code/session_01QtgYwJU3gJwnqY4TwvXL9Z\n\nCo-authored-by: Claude Opus 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(stow): dry-run plans against a target directory that does not exi…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-25T23:48:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4c723e4212eeccbd2ee405ab765aa4239f19f7e7",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 0.6.1 (#187)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-25T23:34:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fd1d22994ca473ea36ea2a4517de602a19fff30",
          "body": "…aths (#189)\n\n* fix(cli): name errors lose the internal prefix; repo remove refuses paths\n\nEvery parse failure from the name package reached users as \"dstow/name:\ncannot parse ...\", an internal module identifier no other dstow error\nexposes, and with no fix: line — the error:/fix: pairing lapsed exa\n[…]\n tilde.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01QtgYwJU3gJwnqY4TwvXL9Z\n\n---------\n\nCo-authored-by: Claude Opus 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): name errors lose the internal prefix; repo remove refuses p…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-25T22:37:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "437a4474a224bd13454682551c7b1147bb1675fe",
          "body": "The M5 half of #182 was already fixed by #181 — ReservedNames() covers\nledger.lock, so the reserved-territory scan never flags it on any layout.\nVerified on the real binary: silent on a forced config/state collision,\nstill loud for a genuinely stray entry.\n\nWhat remained was the legibility gap the b\n[…]\n a SIGKILLed holder leaves the next write free to proceed.\n\nCloses #182\n\n\nClaude-Session: https://claude.ai/code/session_01QtgYwJU3gJwnqY4TwvXL9Z\n\nCo-authored-by: Claude Opus 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(manual): account for the persistent ledger.lock file (#188)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-25T08:02:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0bcf201db278ef18e0da2f49bcd863fef857e172",
          "body": "…tate dirs coincide (#186)\n\nCloses #181. Collision-conditional M5 carve-out: when GlobalConfigDir() == ledger.Dir() (macOS default, both XDG lanes → ~/Library/Application Support) the scan claims the ledger's own ledger.json/ledger.lock; where the lanes differ, a stray ledger.json still warns. ledger owns the names (Dir/ReservedNames); config borrows them. DESIGN M5 amended (retractable).",
          "is_bot": false,
          "headline": "fix(config): stop flagging dstow's own ledger files when config and s…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-23T19:31:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35011264e208f1a682849b992b322680771532c0",
          "body": null,
          "is_bot": true,
          "headline": "chore(main): release 0.6.0 (#135)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-23T14:40:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c1776e02f1f09cdf0b2cac527802c5d08da1d699",
          "body": "…#179)\n\n* ci: guard that docs/** changes carry a releasing commit type (#175)\n\ndocs/** is compiled into the binary (//go:embed all:docs) and dispensed\nas `dstow manual` and every command's --help, so an edit there is\nuser-facing binary content that must ship in a versioned release. But the\nreflex is\n[…]\nd against\nPR #178's real files: docs/** + a non-releasing title now blocks.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: guard that docs/** changes carry a releasing commit type (#175) (…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-23T06:26:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f03711e67f49c1c3bff923945f697a4c6c5b0297",
          "body": "…(#178)\n\n`reference/index.md` said `--json` was on \"the four read surfaces\" —\nliterally incomplete: `theme slots --json` (json.go's `slotsJSON` /\n`jsonSlot`) is a fifth surface whose `{slot, description, consumers}`\nshape was undocumented anywhere, so a theme tool had to run the command\nto discover \n[…]\ner jsonSlot so the fifth\nshape cannot drift either — the same anti-drift guard the other four and\nthe slots consumer table (#163) already have.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(reference): document theme slots --json, the fifth shape (#165) …",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-23T04:57:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "763b86bf03a384eb08e8f92fd35b119fc9c10ebc",
          "body": null,
          "is_bot": false,
          "headline": "chore: re-vendor snippet.sh to release-ci v0.1.5 (TOOL->BIN) (#177)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-23T04:51:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "458b5dce712cc22010932ddccee7e6d034d5588d",
          "body": "…ck (#176)",
          "is_bot": false,
          "headline": "ci: re-vendor install.sh to release-ci v0.1.5 (cosign v3) + drift-che…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-23T04:31:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "719bedea7334b7597c67dcfc0c6de0edde2f9951",
          "body": "`dstow info -f bogusfield` answered `fix: did you mean \"fold\"?`:\n`nearestField` always returned the minimum-edit-distance candidate,\nhowever far, so a wildly wrong ask got a confident but misleading\nsuggestion. Gate it at edit distance 2 — a plausible typo — matching the\nexisting `config.didYouMean`\n[…]\ny TestInfoSuggestionDistanceGated (near suggests, far stays\nsilent). TestInfoUnsetUnknownIllegal's incidental suggestion assertion\nmoves there.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(info): gate field \"did you mean\" by edit distance (#157) (#174)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-23T02:19:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0b577e8a9eddc81e214bded68f5551437400e864",
          "body": "… (#173)\n\n`packages_dir` is a settable repo-level config key, so `dstow info -f\npackages_dir` returning \"unknown field\" read as a gap. But it is principled:\ninfo's configured fields report *composed* effective values (target, translate,\nfold, ignores, exclude-from-bulk resolve across the config leve\n[…]\nges_dir has no info field and why\n- info_test.go: TestInfoPackagesDirNotAField pins the intentional exclusion so\n  it can't drift in half-added\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(info): document packages_dir has no info field, by design (#156)…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-23T01:39:35Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "258202c6796ee25cbca63fc11a21f59322aac936",
          "body": "…) (#171)\n\nAt the global scope `info` reports `metadata-dir` and `global-config-dir` as the\nidentical path — correct per CONTEXT (the metadata directory is scope-relative:\n`.dstow/` at a repo/package root, and at the global scope dstow's XDG config\ndirectory itself), but presented with no note that \n[…]\nr at global\n  scope by design\n- info_test.go: TestInfoGlobalMetadataDirIsConfigDir pins the equality so the two\n  fields can't silently diverge\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(info): note global metadata-dir == config-dir is by design (#155…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-23T00:57:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9be2f12194ccf126d12d816056af8340943b7f0e",
          "body": null,
          "is_bot": false,
          "headline": "docs: note mobile-terminal output preference in CLAUDE.md (#170)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-23T00:25:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2cfe77c306c8aca7ec6b39fb2faea46fee5dc381",
          "body": "The `info` `source` field was a degenerate projection of the FQN: byte-\nidentical to `qualified-name` in repo scope and to `repo` in package scope.\nIt carried no distinct information and its doc (\"the qualified source the repo\nwas registered from\") misled — the registry canonicalizes every source to\n[…]\nepo`; add TestInfoSourceFieldDropped\n  guarding that `source` reads as unknown (exit 2) in both scopes and is absent\n  from the default catalog\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(info)!: drop redundant `source` field (#154) (#169)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-22T20:56:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "26ae9386b19ff6f8a554aa42afec3aeb1c43fcfc",
          "body": "On a fresh machine `dstow list` and `dstow status` printed nothing on either\nstream (exit 0), leaving an agent orienting a bare install with no signal\n(audit finding C4).\n\nEmit a stderr note when the registry holds no repos: \"no repos registered —\nadd one with 'dstow repo add <source>'\". It is routi\n[…]\nhInstallOrientationNote pins the whole contract: fires on list/status\nfresh, dropped by --quiet, absent from --json, silent once a repo exists.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): orientation note when no repos are registered (#153) (#167)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-22T19:51:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cdd69f5eb511f2536f6f78718305e560f1de1f37",
          "body": "…(#166)\n\n`list --repos --help` read \"Repos only (source, scheme, bulk-exclusion)\" and\nlist.md promised \"each source and scheme\", but the human repo row is\n`name  path  (markers)` — source and scheme appear only in --json. DESIGN\nsettles the fork: `list` enumerates a scope's content, `info` reports f\n[…]\nhich pins the human row to\nname+path+markers and fails if a scheme-qualified column ever leaks back in,\nforcing the docs to move with the code.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(cli): list --repos help/manual match the terse human row (#149) …",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-22T18:59:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "474729d9fbe5c1422fc9b1cf0707f6a9a0184549",
          "body": "…2) (#164)\n\nThe manual stated the JSON conventions (snake_case, FQNs, stdout) but no\npage enumerated the per-command object shapes, so an agent scripting --json\nhad to run each command once to discover its fields — a self-sufficiency gap\nagainst the no-external-lookup bar (audit finding C3).\n\nAdd a \n[…]\nkeys and asserts\neach is documented — the same anti-drift stance the slots table guard takes,\nso the doc cannot silently diverge from the code.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(reference): document per-command --json shapes + guard them (#15…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-22T18:00:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ef184d8c34fe19cec7630538f18509d32c6d64ed",
          "body": "… (#163)\n\nslots.md's \"What consumes what\" table listed only six slots and only their\npackage-state/finding-class consumers, while `dstow theme slots` reports the\nfull stage-2 mapping. The table dropped the prose-role consumers\n(section1←heading, name1←name, value2←muted, warning1←warning) and the\nse\n[…]\nhoritative mapping\n  behind the tool. The hand-kept table had no anti-drift guard, which is how\n  A2 arose; now it cannot silently drift again.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(theming): complete the slots.md consumer table + guard it (#148)…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-22T17:42:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "edaca2f1c012f5f0fd510cacb54f32cdf9d2cd7f",
          "body": "…#162)\n\nA per-package not-found in a deploy run (`dstow stow nonexistent`) printed a\nbare `... not found` run-line with no `fix:` remedy, while a not-found via a\nresolve error (`info`/`status`) emits `fix: dstow list`. The difference: the\nper-package case is a StatusNotFound run-line, not a returned\n[…]\n (deduped: the remedy is identical for every not-found operand).\n- Test asserts the deploy not-found names `dstow list` and dedups to one line.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): deploy per-package not-found names its §1.4 remedy (#151) (…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-22T16:20:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "63d45edfd561a7bca71e8b3e0de755c61ff8129b",
          "body": "…150) (#160)\n\nThe hidden `name encode`/`decode` leaves required exactly one argument but\nrendered `dstow name encode [flags]` with no operand and carried no example\non their help or manual pages — the only concrete invocation lived in\ndocs/concepts/naming.md. An agent landing on the command's own he\n[…]\nncrete example in naming.md; it renders in both help and the manual.\n- Extend TestNameGroup to assert both leaves expose the operand + example.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): name encode/decode show <segment> operand and an example (#…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-22T15:30:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f0118ee3e1ab71947a2d6c90b2f8012f19579de9",
          "body": "…47) (#159)\n\nThe `3 — refusal / environment` list claimed a plain \"declined\nconfirmation … where declining means the operation does not happen\"\nexits 3. In practice most interactive declines exit 0: the bulk deploy\ngate (deploy.go:73-77 returns nil), a `clean` orphan\n(maintain.go:117 OutcomeDeclined\n[…]\nts and state\nexplicitly that declining any other (optional) prompt is exit 0\nsuccess, closing the axis-A/axis-C gap the 2026-07-22 audit found.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(exit-codes): scope exit-3 decline to guard/ambiguity prompts (#1…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-22T13:40:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b2a9a287804ef34020b5f017f716642663a30807",
          "body": "Author untagged, manual-only prose beneath the tagged help regions of\n13 command pages under docs/commands/. This prose reaches\n`dstow manual commands <path>` and never `--help`; the tagged regions\n(short/long/examples) and the group Topics lists are untouched, so the\n26 --help outputs are byte-for-\n[…]\nand's\nmanual page carries a section its --help does not — the manual-only\nchannel genuinely reaches the user, coupled to structure not wording.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(manual): expansive command-page prose (#141) (#144)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-22T06:11:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9053b53a5678571745db6a5cf8bd27d8fe5fbcc3",
          "body": "DESIGN §5 H7 binds write commands to refuse when dstow runs inside one of\nits own hooks. `hooks.InHook()` shipped with #43 and was never called from\nproduction code, so every write succeeded from inside a hook; the ledger\nlock was incidental cover with the wrong error, and did not cover `repo add`\na\n[…]\nxit 3 naming the hook, plus a read succeeding beside it.\n\nCloses #139\n\n\nClaude-Session: https://claude.ai/code/session_01MsE1vbCosGdnfyXnPZGDQo\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): H7 write commands refuse from inside a hook (#143)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-22T05:23:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e8f1d412899d4f486dbfb6bedf3f40903a47f808",
          "body": "Ruled at #131: shipped user-facing text never cites an internal\ndocument. The manual ships inside the binary, so a cross-reference has a\nresolvable form available to it — \"dstow manual theming values\" — while a\n§-number names something the reader cannot reach. theme slots' §7.2/§7.3\nwere the last tw\n[…]\nttern: /dev/null\nis legitimate content in a hooks example.\n\nRefs #141\n\n\nClaude-Session: https://claude.ai/code/session_01MsE1vbCosGdnfyXnPZGDQo\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(cli): gate shipped help against internal-document citations (#142)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-22T05:06:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9685545823ef22b642d0182ff68eae2f04242cf1",
          "body": "…ces (#140)\n\ndocs/ gains its non-command half: seventeen pages across five subject\ntopics, so dstow is learnable from the command line alone. The five topics\nan agent previously could not reach from the binary at all — exit-code\nsemantics, the config key schema and legality matrix, environment\nvaria\n[…]\nand the unknown/misplaced-key warnings carry no fix: line.\n\nRefs #131\n\n\nClaude-Session: https://claude.ai/code/session_01MsE1vbCosGdnfyXnPZGDQo\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: write the manual — topic tree, the five CLI-unreachable referen…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-22T04:45:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8998c63c83bd9d9069b9f9ae85c4112e0b3e1bde",
          "body": "…137)\n\n* feat(cli): help text derives from docs/commands/, the single owner\n\ndocs/commands/**.md is now the one owner of dstow's help text, collapsing\nthe two that existed: the Short/Long/Example strings in the cobra command\ndefinitions and DESIGN §2.3/§2.4's prose blocks.\n\nEach of the 26 pages is s\n[…]\ny.\n\nClaude-Session: https://claude.ai/code/session_01MsE1vbCosGdnfyXnPZGDQo\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): help text derives from docs/commands/, the single owner (#…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-22T02:29:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fe01b86f21a8994e0acfc2aad8d3de9871824259",
          "body": "Step 1 of the docs/commands migration (#132): the parser that reads\n<!-- dstow:short|long|examples --> regions out of a command's markdown page.\nPure and wired to nothing yet — the command definitions still own their help\ntext, and nothing is deleted until the docs tree is live and rendering.\n\nExtra\n[…]\n each rejected; foreign comments and absent optional regions are not.\n\n\nClaude-Session: https://claude.ai/code/session_01LHH2qeq1RWm55LjqfmzRak\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(cli): help-text tag extractor for docs/commands pages (#136)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-22T01:41:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "20a1d7c829b08f7b7275acd138c69bd7d79ba109",
          "body": "dstow must be fully learnable from the command line alone, so an agent never\nneeds external documentation. A hidden `manual` group mirrors the tracked\ndocs/ tree, generated at startup from an embed.FS walk: directories become\nnodes, markdown files become leaves, and every node prints its own markdow\n[…]\nexactly the DESIGN silence the\ncharter stops tickets on.\n\nCloses #130\n\n\nClaude-Session: https://claude.ai/code/session_01LHH2qeq1RWm55LjqfmzRak\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): hidden manual tree mirrors docs/ as commands (#134)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-22T01:17:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5b72f9fd12acffac96397480fe83821f20d3af52",
          "body": "docs/ becomes user-facing only — the tree `dstow manual` will mirror and the\nsingle owner of user-facing prose. Everything under it today is repo-internal\nand moves to dev/, clearing the ground for the manual mechanism (its own\nticket). The obsolete .claude/docs handoff joins dev/attic/; .claude/ no\n[…]\nnd the external chezmoi URL in the config-format survey.\n\nCloses #129\n\n\nClaude-Session: https://claude.ai/code/session_01LHH2qeq1RWm55LjqfmzRak\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: reclaim docs/ for users, move internal docs to dev/ (#133)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-22T00:40:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "21eb26801ef174b549e83bee82b1154c282466f8",
          "body": "…gs docs (#128)",
          "is_bot": false,
          "headline": "docs(readme): re-draw FQN diagram, add dnf/apt install + installer-ar…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-20T20:20:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "073238b3fd31af058c323f55e61075b2ada98ec9",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 0.5.0 (#121)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-20T13:09:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fa4c930406cc1e77e058543c982737e84fed4506",
          "body": "… KindOf, error prose (#123)\n\nMechanical fixes for findings F1/F2/F4/F5/F6/F8/F10 of the 2026-07-20\naudit (docs/audit/2026-07-20-code-quality-audit.md):\n\n- F1: fold xdg.Reload into isolateXDG so no test can forget it; delete\n  the theme-only isolateThemeXDG variant and route complete_test.go\n  throu\n[…]\ne-holding variable from slot to role; move\n  checkJSON under its own section marker in cli/json.go.\n- F10: rename repremove.go to reporemove.go.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: audit follow-ups - hermetic xdg tests, single-owner engineOp and…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-20T07:01:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "44fae7c7d509090cc7da7c173f1e6ee2d5cd5fb3",
          "body": "Read-only audit of main at 2157bea: per-axis grades, 13 ranked findings\n(F1 failing non-hermetic completion test, engine.Op duplication,\nstatus/check observation-posture mismatch, string/naming cleanups),\nexemplary-practices list, docs-audit handoff notes, and suggested PR\nsequencing.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(audit): add 2026-07-20 code quality & consistency audit (#122)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-20T07:01:35Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2157bea69922ef403b8f972073548d00e267540b",
          "body": "* feat(theme)!: slots reference surface, show renamed to emit (#116, #117)\n\ntheme slots (#116) is the slot-vocabulary reference: all fourteen generic\nslots in canonical §3.3 order, each name rendered in its own effective\nstyle, descriptions and stage-2 consumers derived from the code-owned\nRole mapp\n[…]\nply@anthropic.com>\n\n* test(e2e): help.sh expects the renamed theme group line\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(theme)!: slots reference surface, show renamed to emit (#120)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-20T03:54:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d7e31f78e9a7fa457d15303b806f8f345c45c766",
          "body": "…-window press (#119)\n\nThe two-stage color vocabulary (#118) merged to main during the\n2026-07-20 GitHub API outage; release-please's regeneration run 503'd,\nso release 0.4.0 (#112) was pressed without it. The tag includes the\ncommit, the notes and changelog did not — and release-please considers\nth\n[…]\nplease's own\nformat. Ruled by Rocne on the acceptance walk (#52, walk finding #2,\noption 1). Release notes on v0.4.0 edited to match separately.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(changelog): backfill the v0.4.0 feat! entry missed in the outage…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-20T03:01:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cea1e8f105f60637cf40341f86a57e408477cdde",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 0.4.0 (#112)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-20T01:13:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "230d566bb67b2b53a288c13ebbb414f672e97fd0",
          "body": "…e mapping (#118)\n\nDESIGN §3.3/§7.2/§7.3 amended per the #115 rulings: theming speaks a\nfourteen-slot generic roster (content: section/name/value; messages: error/\nwarning/success/info — two prominence tiers each, 1 loudest); dstow's\ninternals (states, check classes, severity prefixes, prose roles) \n[…]\nle use the\ngeneric slot names; the old internal-term slots are unknown keys (warn-and-\nskip in files/env, usage error as operands).\n\nCloses #115\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(ui)!: two-stage color vocabulary — generic slots, code-owned rol…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-20T00:59:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "451cf521157e03dc8154f289809879b8de6e4964",
          "body": "…rr (#113)\n\nNames render through the name slot; a Theme Name / Source header renders\nthrough the heading slot on stderr (O1: commentary, never data) and is\ndropped by --quiet (O7), so piped stdout stays pure rows. Origin styling\ndeferred by ruling. Padding computed on plain text so ANSI bytes never\nskew columns.\n\n\nClaude-Session: https://claude.ai/code/session_01EXffEEt3LXWLwaR4D7nhCC\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(theme): colorized list — name-slot names, heading header on stde…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T23:18:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3e99a064aa7b1125fa78f2a08b7e77a6326479ef",
          "body": "…(#111)\n\nRuled 2026-07-19: a command's noun is the noun of its output. The colors\ngroup emitted themes while showing no colors; the theme group fixes both\ngaps — theme list discovers the roster (bundled + user themes dir,\norigin and active marker), theme show outputs colors: the effective\n§7.3 stack\n[…]\nd; README\nupdated; completion covers theme names and slot stems (A20).\n\n\nClaude-Session: https://claude.ai/code/session_01EXffEEt3LXWLwaR4D7nhCC\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: theme group (list, show) replaces colors — nouns match outputs …",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T23:06:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d989a9ca4b628460ce023c579e18f3b4f8f4df45",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 0.3.0 (#110)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-19T22:26:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7c718ed6cfec671762b1ba1f75f1d2a2c4000e3",
          "body": "Re-ground the §7.2 default palette in prior art (ruled 2026-07-19): the\nprose and severity slots adopt Cargo's help styling (clap-cargo style.rs)\n— heading=HEADER, name=LITERAL, muted=PLACEHOLDER (the same-hue\nlower-weight sibling), error/warning/note namesakes, fix=VALID sharing\nname's color (fix l\n[…]\nk.\nThe Whiskers machinery is untouched (#105 verdict: never extended).\n\n\nClaude-Session: https://claude.ai/code/session_01EXffEEt3LXWLwaR4D7nhCC\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: cargo-derived default palette, cargo + fang-ansi presets (#109)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T22:21:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0b7f7b106a23ab367823d3534f97b10a21366c5a",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 0.2.0 (#99)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-19T20:42:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ffbb1ad30cac735f3d051ff5e19c90dcf2bc00a1",
          "body": "…05) (#106)\n\nCloses the standing preset-roster silence (#38/#69), ruled by Rocne:\nleverage catppuccin's tooling and standard palette without coupling\ndstow to it.\n\n- themes/dstow.tera: one Whiskers template owns the role mapping settled\n  by live iteration (heading = ul text, name = bold blue, muted\n[…]\n-file\nformat stays neutral and user themes are unaffected.\n\nFixes #105\n\n\nClaude-Session: https://claude.ai/code/session_01EXffEEt3LXWLwaR4D7nhCC\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: preset roster = four catppuccin flavors, Whiskers-generated (#1…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T20:00:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cd17e6e1162873ab483d69e215b95937b2094c32",
          "body": "…tint (#104)\n\nRocne iterated live on heading/name combinations and locked the winner:\nheading = \"ul #cdd6f4\" (text color, underlined, no bold) — sections are\nfound by the line, not a tint; name stays bold blue (#89b4fa), the only\ncolor on the page. Theme file only; defaults untouched.\n\n\nClaude-Session: https://claude.ai/code/session_01EXffEEt3LXWLwaR4D7nhCC\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: quiet underlined headings in catppuccin-mocha — structure over …",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T19:45:53Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a85a78e31a982d8d96e72da12c88b39010197a3a",
          "body": "…from mauve headings (#103)\n\nRocne, running the theme live, could not tell heading (#cba6f7 mauve)\nand name (#b4befe lavender) apart — adjacent pastels at terminal sizes.\nCatppuccin's style-guide roles: keywords/headers mauve, functions blue;\nlavender is a subtle-UI accent, not a foreground identifi\n[…]\n. Bold keeps\nit distinct from the non-bold fix: lines sharing the hue.\n\n\nClaude-Session: https://claude.ai/code/session_01EXffEEt3LXWLwaR4D7nhCC\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: catppuccin-mocha names to blue — lavender was indistinguishable …",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T19:21:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7111204024ecb3d76dbe2e6d441e5d16f27b2ae5",
          "body": "…(#102)\n\nThe parser and default-palette test tables mixed named attributes\n(color.Bold) with raw SGR numbers (31) for hues. fatih's Fg*/Bg*\nconstants are the same ANSI values, so the expectations stay independent\nof DefaultPalette's construction while reading as words. Codes fatih\ndoes not name (def\n[…]\n49, the 38/48 extended-color\nintroducers) remain numeric by necessity.\n\n\nClaude-Session: https://claude.ai/code/session_01EXffEEt3LXWLwaR4D7nhCC\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: spell SGR expectations with fatih color constants in ui tests …",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T19:06:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "154388c257419c5da2f88d219b2963a398413a2a",
          "body": "…(#100)\n\nRocne ruled (issue #96 follow-through): with help colorization landed,\nthe prose slots (heading/name/muted) are help's whole face, and their\nbold/dim-only values — calibrated when the slots were incidental — meant\nhelp showed no color on any terminal, themed or not.\n\n- §7.2 default palette:\n[…]\n on some emulators.\n- Palette test updated to the amended §7.2 values.\n\n\nClaude-Session: https://claude.ai/code/session_01EXffEEt3LXWLwaR4D7nhCC\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: color the prose slots — help shows color by default and themed …",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T18:46:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "056869c1fbffbc8433e56e50400140c97a92e6dd",
          "body": "* feat: cobra-generated, themed help from the canonical content\n\nImplements the A2 amendment (issue #96): help is generated by cobra from\neach command's own definition and colorized through the ui theming stack.\n\n- Commands carry Short/Long/Example and flag usage strings sourced from\n  the §2.3/§2.4\n[…]\n1087)\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01EXffEEt3LXWLwaR4D7nhCC\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: cobra-generated, themed help from the canonical content (#98)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T09:56:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8262622363d702835ae976c687d8276329e88f1b",
          "body": "…erated and themed (#97)\n\nRocne ruled (issue #96): approving the help-text prototype approved its\ncontent — the material fed into help generation — never a mandate to\nbypass cobra's help machinery and pin bytes. Amend DESIGN accordingly:\n\n- §2 preamble: the §2.3/§2.4 blocks bind content (command inv\n[…]\natim\" ground retired; the\n  rejection stands on the remaining grounds.\n\n\nClaude-Session: https://claude.ai/code/session_01EXffEEt3LXWLwaR4D7nhCC\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: amend A2 — canonical help binds content, rendering is cobra-gen…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T09:40:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "94fb24e4593f26d8dd6a3e47819a81cda357483e",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 0.1.2 (#95)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-19T08:23:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f4e3977891186cb30ab0bb0cb5cb6c8e176a22fa",
          "body": "…#47) (#94)\n\nhomebrew_casks declared manpages: man/dstow.8 and completions: dstow.{bash,fish}\n+ _dstow, but the archives: and nfpms: blocks deliberately omit man/completions\nuntil #47 builds them — so the release tarball ships neither. Homebrew resolves\na cask's manpages/completions against paths IN\n[…]\n2 press republishes a working cask; v0.1.1's stays broken until then.\n\n\nClaude-Session: https://claude.ai/code/session_01L9r1bWX9hA5T845WSLqQ76\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(release): drop cask manpages/completions dstow doesn't ship yet (…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T07:29:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "018d32a85230a4c41882c2319a2eec6c21692b20",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 0.1.1 (#92)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-19T07:00:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eea47c2b3eb51c1076b1a6bc57528a7fe1638134",
          "body": "…e-ci#46) (#93)\n\n* fix(signing): adopt cosign v3 Sigstore bundle (release-ci#45, D35)\n\ncosign v3's sign-blob dropped detached --output-signature/--output-certificate\nfor a single <checksums>.sigstore.json bundle. Move the goreleaser signs block\nand the dryrun verify onto --bundle, and SHA-pin the dr\n[…]\ns).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01L9r1bWX9hA5T845WSLqQ76\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: add gitleaks secret-scan gate + canonical pre-commit hook (releas…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T06:33:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8038bd8421c39246d0eb8686aab78203eadc3772",
          "body": "cosign v3's sign-blob dropped detached --output-signature/--output-certificate\nfor a single <checksums>.sigstore.json bundle. Move the goreleaser signs block\nand the dryrun verify onto --bundle, and SHA-pin the dryrun's cosign-installer\nto the exact v4.1.2 ref release.yml uses (cosign v3) so the dry\n[…]\ncarrying\nthe v3 verify contract + the new D34 artifact-shape assert).\n\n\nClaude-Session: https://claude.ai/code/session_01L9r1bWX9hA5T845WSLqQ76\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(signing): adopt cosign v3 Sigstore bundle (release-ci#45, D35) (#91)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T06:19:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "13c9d681151f7ccbf63d65b880c51bdde04f04b0",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release 0.1.0 (#58)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-19T04:04:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4532efefcd21bbad4760ef727006952f8e6b3549",
          "body": "Rocne ruled (2026-07-19): GPL-3.0 for now — start restrictive, keep the\nsole-author option to relicense looser later (the reverse direction\nleaks: published permissive versions stay permissive forever).\nAttribution requirement carried (GPL requires notice retention).\nCanonical verbatim text from gnu\n[…]\nm metadata MIT → GPL-3.0-only\n(SPDX; \"only\" not \"or-later\", preserving choice over future FSF terms);\nREADME gains the license + copyright line.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: license under GPL-3.0 (#90)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T03:31:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "dbbcb3ea5796fea05011c9302a830f3881779d21",
          "body": "… (#88)\n\nRocne ruled (2026-07-19, superseding the earlier deliberate 1.0.0\ndebut): distribution begins pre-release at 0.1.0 so the acceptance walk\n(#52) can drive the real pipeline — public installer, brew, apt/dnf —\non low-stakes tags, iterating as refinement demands. v1.0.0 is declared\nby Release-As when Rocne accepts, never reached by drift:\nbump-minor-pre-major keeps breaking changes below 1.0 until then.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: debut at v0.1.0 — v1.0.0 becomes the declared official release…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T02:55:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ccf6d42e21b25d190d44da6fac62ebd0b17d54fd",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): bump actions/checkout from 6 to 7 (#83)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-19T01:55:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6cec5090dc9c86500c8a4643d1896d20400eec9e",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): bump actions/setup-go from 6 to 7 (#82)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-19T01:55:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d4d0f6005562486ec29b6e17d69f72ac38325202",
          "body": "* feat: emit the vendored snippet.sh from dstow snippet rc\n\nThe rc snippet is now the vendored, release-ci-owned file (§9.1 B1 as\namended, D26) embedded from the repo root — go:embed cannot reach above a\npackage dir, so a root package carries it. The ops transcription\n(snippets/rc.sh) is deleted; th\n[…]\nthropic.com>\n\n* fix: annotate intentional literal match for shellcheck SC2016\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: emit the vendored snippet.sh from dstow snippet rc (#87)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T01:26:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6f4a595d423ea47d1d3ef3c953892e63bf5a47df",
          "body": "Per the plan of record (#64, canonical in release-ci DESIGN §14.4): B1's\ncanonical snippet text is now the vendored snippet.sh (D26 ownership,\npropagated like the installer); B6's floor gains the dual presence check\ninstall-path-first (D16), ensure-exactly --version semantics (D28), and\nthe tunable \n[…]\nrrected to match (the old \"implies --force\"\nclaim is wrong under D28).\n\nText leads code: the snippet-rc go:embed re-point follows in its own PR.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: amend DESIGN §9 to the accepted release-ci counter-offers (#86)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T01:20:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f15b0aa8a7d9c5c4f421fa9ba9598c0e348edc14",
          "body": "dstow#81 ruled conform and the flag landed (#80, after the DESIGN\namendment #84), so the intentionally-absent placeholder gives way to the\ncanonical step (gostow's text, dstow paths). The dryrun triggers on this\nfile, so this PR proves the step live against the real snapshot binary.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: restore the D30 --version assert in release-dryrun (#85)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T00:47:51Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "16ee74457fcc0993123b1bdca35030f4603adcb1",
          "body": "Caught live by the D30 assert on its first run (#79's dryrun): dstow had\nonly the `version` subcommand, and `dstow --version` was an unknown-flag\nusage error — but the canonical installer's ensure-check (release-ci\nD28/D30) and the dry-run's assert-version-contract.sh both parse\n`<tool> --version` l\n[…]\ndstow version` prints, so the\ntwo spellings share one source of truth. Test-first; verified against the\nreal assert with a dryrun-stamped build.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: support --version at the root (D30 contract) (#80)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T00:45:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "05c3bd7719c0405488665861aff263d4daf9498c",
          "body": "Rocne ruled conform at #81: dstow adds a root --version flag printing\nexactly what `dstow version` prints — one source of truth, two spellings.\nThe subcommand stays canonical and remains the help surface (§2.3\nunchanged). Text leads code: this amendment precedes landing PR #80.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: amend DESIGN §2.1 with the root --version flag (#81 ruling) (#84)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-19T00:44:33Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "423fe779589a324d4bc71c05bab18f1c85dd3ef1",
          "body": "…bot, single-pin v0.1.3, pr-title caller, D30) (#79)",
          "is_bot": false,
          "headline": "chore: adoption-audit rollout rounds 1+2 (rename, shellcheck, dependa…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-18T23:41:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f436a065f5a2458916409eb7ca8a17f99a97e2af",
          "body": "…64) (#78)",
          "is_bot": false,
          "headline": "feat: vendor the canonical install.sh and rc snippet (release-ci#1, #…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-18T21:08:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ff145cc64b1a2de2d6706f9e8937f6f82441ce5",
          "body": "Commit dstow-signing-key.asc (fpr 64894FE3…, the canonical rocne/releases\npackage-signing key) and wire it into release.extra_files, so a user can verify\na downloaded .deb/.rpm by hand — same as gostow and dot-dagger now do. Its\nprivate half is the GPG_PRIVATE_KEY repo secret (already set).\n\nThe apt\n[…]\nso it is not committed here. Comment updated to\nmatch.\n\nPart of the org signing-material rotation (rocne/release-ci#28).\nCloses rocne/dstow#49.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: ship the package-signing public key with releases (#77)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-18T08:40:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d365656e91f829375e4e94fca9f875da79def081",
          "body": null,
          "is_bot": false,
          "headline": "ci: assert the D34 artifact-shape contract in release-dryrun (#75)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-18T05:02:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d331a8a58e398b3159ea14625393c7acfca0744",
          "body": "Write the v1 README to the information-complete bar (per the wayfinder\nmap's docs decision): install (bootstrap snippet + curl|sh + go install),\nquickstart, the three-view model, the naming grammar, the full command\nsurface, four-level configuration, GNU Stow migration (renamed rc,\nsupplement mode, \n[…]\n : and @, not\n/), XDG path claims, and the quickstart happy-path driven end-to-end\n(repo add -> list -> stow -> status -> unstow).\n\nCloses #51.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add README-as-manual (#76)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-18T04:35:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8edd1b966b6dff72bb9e3ea1e6a77126d164b140",
          "body": "Wire every ops verb into a cobra CLI (v1.10.x, no viper): the full §2.1\nsurface (stow/unstow/restow/adopt, list/info/status, check/clean/rebuild,\nrepo/snippet/colors groups, hidden name group, completion, version), help\ntext verbatim from DESIGN §2.3/§2.4 on stdout (A2), the A3 exit-code map in\none \n[…]\n.\n- repo add owner/name -y proceeds on the github reading (revisit: #72).\n- declined interactive bulk gate exits 0 (revisit: #73).\n\nCloses #47.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add internal/cli, the command surface and composition root (#74)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-18T02:53:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "83862383af9a27ebac52df6e7abef7b17b1c3d32",
          "body": "Completes the ops app core (issue #69) with the remaining verbs, all\ndata-returning (A4), composing repo/git/registry/engine/ui, plus the\nvalue-grammar emitter ui was missing.\n\nrepo add/remove/update/upgrade (internal/ops):\n- add: source classification + §1.2 confirm-unless-unambiguous (bare-form\n  \n[…]\nthe form that unstows (§5.3).\n\nTests use git.Fake and temp registries throughout; the snippet test asserts\nthe B1 text transcribed from DESIGN.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add ops repo verbs, snippet rc, and colors theme (#71)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-18T00:05:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6c12c2e56ce28d8b5eefb1b4dace049340c49b87",
          "body": "Implements dstow's three read surfaces at the ops layer (issue #46), all\ndata-returning (A4), TDD-covered, and composing config/repo/engine/ledger/git:\n\n- list: a scope's configured content — repos (global scope), a repo's\n  packages, or a package's raw untranslated paths; never inspects targets.\n- \n[…]\nstow metadata dir — dstow's own bookkeeping,\n  never package content.\n\n\nClaude-Session: https://claude.ai/code/session_019bu1UR5vnTWfGq2DjZpG6B\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add ops views — list, info, status — and the O9 name helper (#70)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-17T23:00:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a7a34932c5a034097b27fe5708534d3120a964e0",
          "body": "DESIGN §6.4 landed in internal/ops: one shared classifier over a ledger\nsnapshot (unobservable → contradicted → broken → orphaned, first match\nwins) so check and clean can never disagree; check as a lock-free pure\nread; clean as the Scope{All} broom recomputing fresh under the lock,\nwith per-orphan \n[…]\n warning) — REQUIREMENTS §1.5: never\nclaim absence without a sighting.\n\n\nClaude-Session: https://claude.ai/code/session_019bu1UR5vnTWfGq2DjZpG6B\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add ops maintenance verbs (check, clean, rebuild) (#68)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-17T20:34:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3d53bd4dc0cdde2ce07444e96b4e392e11391027",
          "body": "DESIGN A13 + §2.4 + §6.4, REQUIREMENTS §3 + §8.5: Deploy runs\nstow/unstow/restow with per-package independence, canonical-FQN\nexecution order (ruled on #44, one ordering owner with the config\ndoorway), bulk semantics with exclude_from_bulk and explicit-naming\noverride, §1.2 ambiguity as data (Ambigu\n[…]\n the ranked §8.5 candidate helper\nas a pure config+ledger computation.\n\n\nClaude-Session: https://claude.ai/code/session_016NfKZDLzBJRM82hj9YNYmg\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add ops deploy verbs and adopt, the app core's deploy half (#67)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-17T15:46:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "044deaa34870e7e9c9ad0772a25ffc1ce741bc93",
          "body": "DESIGN.md §4 M6-M7 + §5 + A11, REQUIREMENTS §9.1: discovery of the\neight per-event executables with M6/M7 warnings as data (.d reserved,\nchmod hint, did-you-mean), the twelve DSTOW_HOOK_* variables with the\nH2 encoding stance (absent-not-empty enforced by stripping managed\nnames from the inherited e\n[…]\nilently skip a guard\nhook), and InHook for H7 write-refusal detection.\n\n\nClaude-Session: https://claude.ai/code/session_016NfKZDLzBJRM82hj9YNYmg\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add internal/hooks, the lifecycle and context contract (#66)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-17T09:15:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "15aa7b3bfa8158c94bcf048365cb815c95abb15e",
          "body": "internal/ignore (DESIGN A15 + §3.4): the native gitignore-glob matcher\nwrapping go-git's plumbing/format/gitignore — C16 semantics (basename at\nany depth, slash-anchored, trailing-slash dir-only, **), additive chain\nwith no precedence to resolve, refused-and-reserved forms (! and //)\nguarded again a\n[…]\n)\nwith the native glob chain; compat regex chains ride Options.Ignore.\n\n\nClaude-Session: https://claude.ai/code/session_01MJHVtp92NdeUGVCCrsxYro\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add internal/ignore and internal/engine, the gostow seams (#65)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-17T08:25:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "321d56489aefb4732c5e41cadc8962191a08bec1",
          "body": "Ruled on #41 (2026-07-17): symlinks are transparent in package\nenumeration — building detect-and-avoid on a symlink defeats its\npurpose. A symlink to a directory is a visible directory and\nenumerates as a package, silently, in both modes; a symlink to a file\nis transparently a file (silent skip). A \n[…]\n mode — there every visible entry is definitionally a package,\nso one that cannot resolve deserves the announcement — and silently in\nroot mode.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: enumerate symlinked directories as packages (#63)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-17T07:56:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "82c4da31bc32648f3ceedf123643980529a3df0b",
          "body": "…rt (#62)\n\ninternal/repo per DESIGN A9 + A19 + C3 + M2/M3: the registry\n(dstow-written repos.toml — both C9 forms parsed, canonical sorted\nshorthand emitted, ledger's temp+fsync+rename discipline), qualified-\nsource parsing over the name grammar (github/local, internal and\nclosed; unknown scheme nam\n[…]\nests. FFApply claims divergence only on\nahead>0 && behind>0 evidence (§1.5: no unbacked claims); other merge\nfailures stay plain command errors.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add internal/repo and internal/git, the repo set and the git po…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-17T07:14:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "02d50d2982f685faf507c82725123e94caa50359",
          "body": "DESIGN.md §6 + A10 (ADR 0001): one JSON document per machine at\n$XDG_STATE_HOME/dstow/ledger.json — a current-state index, never a\njournal. Load is a lock-free snapshot that never writes: missing file =\nempty ledger; corrupt or version<1 refuses loudly with the rebuild/\nrestore remedies (never amnes\n[…]\n the same directory.\nEntry.Contradicted is the one owner of the disk-disagrees test, so\ncheck's report and the writers' pruning can never drift.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add internal/ledger, the current-state index (#61)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-17T02:44:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b420f09cc9af73740c2782eb2ffbaed13f9cd517",
          "body": "DESIGN.md §3 + A8: the four-level configuration chain (package → repo →\nglobal → built-in floor) with per-level loaders and an Effective view —\nnearest level wins per knob, ignores compose additively with per-carrier\nlanguage and provenance (C16/C17). Legality matrix over the one key\nvocabulary, unk\n[…]\n3),\nM5 reserved-territory scans, and the one metadata-location accessor.\n\nAll diagnostics return as data (A4); ui renders them at the consumers.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add internal/config, the four-level chain and stow compat (#60)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-17T02:06:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c53a2512b08235ec18aa7f4c388d3c5aa66db7ce",
          "body": "DESIGN.md §7 + A4-A6: the owned printer (sole stream owner), per-stream\nenable chain, severity prefixes, ANSI-16 semantic palette, git-grammar\ncolor-value parser, DSTOW_COLORS/[color]/theme/default theming stack with\ngo:embed presets behind one loader, Interactive() seam, O11 strip contract.\n\n\nClaude-Session: https://claude.ai/code/session_019kJxKYMzDGPmn99ijDTfhr\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add internal/ui, the printer, palette, and theming stack (#59)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-16T21:53:39Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "809bf17997ec1dd512df9874dec55bc622f0d98d",
          "body": "DESIGN.md §1 + A7: FQN parse/format, percent encode/decode (incl. @ and\ncontrol bytes), segment-boundary suffix matching, :: kind-forcing, and\npath-vs-name classification. Zero I/O, zero deps.\n\n\nClaude-Session: https://claude.ai/code/session_019kJxKYMzDGPmn99ijDTfhr\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add internal/name, the pure naming package (#57)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-16T16:07:06Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "80f5dcad694204478d96dae72773bf3cc8c1fbc0",
          "body": "Inherited wholesale from release-ci per DESIGN.md §9.3, copy-paste-and-\nrename from gostow: release-please primary path (same-run delegation to\nthe reusable workflow), tag-push break-glass path, and the snapshot\nsigning gate that runs on PRs touching .goreleaser/**. dstow deviations:\nevery pre-1.0 g\n[…]\nDO(#47), public-key extra_files re-pointed to TODO(#49).\n\nPart of #50.\n\n\nClaude-Session: https://claude.ai/code/session_01Pnen2QK5h5nLJdXXy7Jec8\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: wire release pipeline (release-please, break-glass, dry-run) (#56)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-16T14:30:26Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "63f4c73fa005ac8e4080ca07fbac05a6f629099a",
          "body": "test/run-e2e.sh builds dstow linux/amd64 from HEAD and drives one fresh\nubuntu:24.04 container per exerciser; procure/local.sh stages the binary\nat the contractual ~/.local/bin (DESIGN.md B6). Seed exerciser smoke.sh\nasserts only DESIGN-intended behavior (bare dstow exits 0 per the §2\nhelp path) — n\n[…]\no future\ntickets only write tests, never infrastructure.\n\nPart of #54.\n\n\nClaude-Session: https://claude.ai/code/session_01Pnen2QK5h5nLJdXXy7Jec8\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: add container e2e harness (evolving integration suite) (#55)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-16T13:41:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fb979838d03ac69148ebb547808c26937376c669",
          "body": "Copied verbatim from gostow. PRs are squash-merged, so the PR title\nbecomes the commit subject on main — which is what release-please\nreads once #50 wires it. Pulled forward from #50 so the convention is\nenforced from the first PR, not remembered.\n\n\nClaude-Session: https://claude.ai/code/session_01Pnen2QK5h5nLJdXXy7Jec8\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: enforce conventional PR titles (#53)",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-16T13:10:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1367cc53f74b9b6dfff551d54115735f867f31b8",
          "body": "go.mod (github.com/rocne/dstow), thin cmd/dstow/main.go on the gostow\npattern (resolveVersion ldflag/buildinfo fallback, os.Exit-only wiring,\nstdin passed per the cli.Run signature), minimal internal/cli stub for\n#47 to build out, CI test+lint workflows, .golangci.yml, and a\n.goreleaser/dstow.yaml s\n[…]\nons commented\nout and pointed at their restoring tickets.\n\nResolves #36.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Pnen2QK5h5nLJdXXy7Jec8",
          "is_bot": false,
          "headline": "Scaffold: module, cmd wiring, CI, lint, goreleaser skeleton",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-16T06:59:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a4b922779ff15d58d2a89c4cab80ffc6d6b83bc7",
          "body": "Synthesizes every resolution of the design map (#16) as amended: naming\ngrammar (now with the @ suffix reservation, scheme-interpreted), CLI\nsurface with the approved help text, config schema, metadata directory,\nhook context contract, ledger, output design, Go architecture, bootstrap\nand release wi\n[…]\nrbs the @ reservation and the\ncontrol-character encoding.\n\nResolves #30.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Pnen2QK5h5nLJdXXy7Jec8",
          "is_bot": false,
          "headline": "Add docs/DESIGN.md: the binding v1 design synthesis",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-16T06:19:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "280c3e9006f6ec5000bd1bfc95546b2369282e36",
          "body": "…CONTEXT amendments\n\nDecided on #28 (bootstrap design). §9.2 collapses to a deliberate-absence\npointer; §1.5/§2.7/§4.2/§5.5/§11 dependency mentions removed; §9 retitled\nHooks. CONTEXT.md retires dependency/names/hint/dependency-query. The full\nsuperseded design is preserved verbatim in docs/attic/dependencies.md.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_011yBbqPPRipMyyNwQZe63ND",
          "is_bot": false,
          "headline": "Remove the dependency concept from v1: ADR 0002, attic, REQUIREMENTS/…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-15T23:54:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1216fb4665671e16ffa0710bde57ee38789e0417",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_011yBbqPPRipMyyNwQZe63ND",
          "is_bot": false,
          "headline": "Sharpen Field mint: data-about vs content, metadata-directory shorthand",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-15T17:49:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0a69daae473bd76934fada08e83751bb5e69c920",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_011yBbqPPRipMyyNwQZe63ND",
          "is_bot": false,
          "headline": "Mint 'field' / 'inherent field' / 'configured field' in CONTEXT.md",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-15T17:32:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2b237380331af31c1c0678b263e22da80a44ffaf",
          "body": "Handoffs/context files are not permission to start work; wayfinder is\nuser-invoked; report the map issue number; orientation reads allowed,\ntask-execution reads are not.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01PCH9knpRM1eDtomgFmvvbi",
          "is_bot": false,
          "headline": "Add Session-start rules to CLAUDE.md",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-15T16:29:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1fb9c96fbaf7e7c08d1ee9dd6c93cdea7325bae2",
          "body": "…epo entry\n\nPer the Metadata directory resolution (#24, M1-M8).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01PCH9knpRM1eDtomgFmvvbi",
          "is_bot": false,
          "headline": "Mint 'metadata directory' in CONTEXT.md; note packages placement in R…",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-15T14:04:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b91a8e821a640d59c390e2d9b03b47d99a1ba157",
          "body": "From the Config schema resolution (#23): the repo registry is\ncommand-written configuration, not state (config = intent, state =\nrecord). Also corrects the Repo entry's leftover \"ordered list\"\nsentence to the unordered repo set per the 2026-07-14 Naming grammar\namendment.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01PCH9knpRM1eDtomgFmvvbi",
          "is_bot": false,
          "headline": "Mint 'repo registry' in CONTEXT.md; fix stale ordered-search-path line",
          "author_name": "Rocne Scribner",
          "author_login": "rocne",
          "committed_at": "2026-07-15T07:20:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        }
      ],
      "releases_count": 10,
      "commits_last_year": 110,
      "latest_release_at": "2026-07-26T00:11:56Z",
      "latest_release_tag": "v0.6.2",
      "releases_from_tags": false,
      "days_since_last_push": 2,
      "active_weeks_last_year": 3,
      "days_since_latest_release": 3,
      "mean_days_between_releases": 0.8
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 42,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/rocne/dstow",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/rocne/dstow",
          "is_deprecated": false,
          "latest_version": "v0.6.2",
          "repository_url": "https://github.com/rocne/dstow",
          "versions_count": 10,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-26T00:11:46Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 3
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 31
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod",
        "internal/ui/themes/cargo.toml"
      ],
      "largest_source_bytes": 24858,
      "source_files_sampled": 124,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 2248
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.53.0",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-5cv4-jp36-h3mw",
              "GO-2026-5025",
              "GO-2026-5026",
              "GO-2026-5027",
              "GO-2026-5028",
              "GO-2026-5029",
              "GO-2026-5030",
              "GO-2026-5942"
            ],
            "fixed_version": "0.56.0",
            "advisory_count": 8,
            "oldest_advisory_days": 68
          },
          {
            "name": "golang.org/x/sys",
            "direct": true,
            "version": "v0.43.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5024"
            ],
            "fixed_version": "0.44.0",
            "advisory_count": 1,
            "oldest_advisory_days": 67
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 1,
          "moderate": 1
        },
        "advisory_count": 9,
        "affected_count": 2,
        "assessed_count": 16,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/BurntSushi/toml",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/adrg/xdg",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.5.3"
        },
        {
          "name": "github.com/fatih/color",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.19.0"
        },
        {
          "name": "github.com/go-git/go-git/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.19.1"
        },
        {
          "name": "github.com/mattn/go-isatty",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.20"
        },
        {
          "name": "github.com/rocne/gostow",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.4.0"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.1"
        },
        {
          "name": "golang.org/x/sys",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.43.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/adrg/xdg",
            "direct": true,
            "version": "v0.5.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/burntsushi/toml",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/color",
            "direct": true,
            "version": "v1.19.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/go-git/v5",
            "direct": true,
            "version": "v5.19.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": true,
            "version": "v0.0.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rocne/gostow",
            "direct": true,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "v1.10.1",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": true,
            "version": "v0.43.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/gcfg",
            "direct": false,
            "version": "v1.5.1-0.20230307220236-3a3c6141e376",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/go-billy/v5",
            "direct": false,
            "version": "v5.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jbenet/go-context",
            "direct": false,
            "version": "v0.0.0-20150711004518-d14ea06fba99",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": false,
            "version": "v0.1.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.9",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.53.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/warnings.v0",
            "direct": false,
            "version": "v0.1.2",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 16,
        "direct_count": 8,
        "indirect_count": 8
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 93,
        "open_issues": 30,
        "closed_ratio": 0.741,
        "closed_issues": 86,
        "closed_unmerged_prs": 1
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "rocne",
          "commits": 98,
          "avatar_url": "https://avatars.githubusercontent.com/u/15507033?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "docs-release-guard.yml",
        "lint.yml",
        "pr-title.yml",
        "release-dryrun.yml",
        "release-manual.yml",
        "release-please.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/27 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 8,
            "reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 2,
            "reason": "8 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "6ed7ea3929ddaecaa36795a64cda806566f23e62",
        "ran_at": "2026-07-29T17:27:13Z",
        "aggregate_score": 4,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-26T18:32:43Z",
      "oldest_open_prs": [
        {
          "number": 210,
          "created_at": "2026-07-26T18:32:40Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-26T18:32:24Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 35,
          "created_at": "2026-07-16T06:40:14Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 52,
          "created_at": "2026-07-16T06:42:25Z",
          "last_comment_at": "2026-07-26T18:36:52Z",
          "last_comment_author": "rocne"
        },
        {
          "number": 72,
          "created_at": "2026-07-18T02:50:11Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 73,
          "created_at": "2026-07-18T02:50:13Z",
          "last_comment_at": "2026-07-23T18:24:44Z",
          "last_comment_author": "rocne"
        },
        {
          "number": 101,
          "created_at": "2026-07-19T19:02:28Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 107,
          "created_at": "2026-07-19T21:33:20Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 108,
          "created_at": "2026-07-19T21:33:22Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 124,
          "created_at": "2026-07-20T07:16:54Z",
          "last_comment_at": "2026-07-26T02:29:54Z",
          "last_comment_author": "rocne"
        },
        {
          "number": 125,
          "created_at": "2026-07-20T07:16:56Z",
          "last_comment_at": "2026-07-26T18:45:01Z",
          "last_comment_author": "rocne"
        },
        {
          "number": 126,
          "created_at": "2026-07-20T07:16:58Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 127,
          "created_at": "2026-07-20T07:17:00Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 138,
          "created_at": "2026-07-22T03:13:01Z",
          "last_comment_at": "2026-07-22T05:01:59Z",
          "last_comment_author": "rocne"
        },
        {
          "number": 161,
          "created_at": "2026-07-22T15:50:38Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 168,
          "created_at": "2026-07-22T20:14:15Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 172,
          "created_at": "2026-07-23T00:55:35Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 180,
          "created_at": "2026-07-23T14:37:49Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 184,
          "created_at": "2026-07-23T18:38:37Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 185,
          "created_at": "2026-07-23T18:39:13Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 195,
          "created_at": "2026-07-26T02:29:30Z",
          "last_comment_at": "2026-07-26T02:50:08Z",
          "last_comment_author": "rocne"
        },
        {
          "number": 196,
          "created_at": "2026-07-26T02:29:32Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/rocne/dstow",
    "host": "github.com",
    "name": "dstow",
    "owner": "rocne"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 56,
      "inputs": {
        "security": 50,
        "vitality": 73,
        "community": 24,
        "governance": 52,
        "engineering": 76
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 73,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "commits_last_year": 110,
              "human_commit_share": 0.88,
              "days_since_last_push": 2,
              "active_weeks_last_year": 3
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 2 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "3/52 weeks with commits",
                "points": 2.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "110 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 110
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "releases_count": 10,
              "latest_release_tag": "v0.6.2",
              "releases_from_tags": false,
              "days_since_latest_release": 3,
              "mean_days_between_releases": 0.8
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "10 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 3 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~0.8 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 0.8
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 24,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (GPL-3.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "GPL-3.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 52,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "merged_prs": 93,
              "open_issues": 30,
              "closed_issues": 86,
              "issue_closed_ratio": 0.741,
              "closed_unmerged_prs": 1
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "74% of issues closed",
                "points": 34.6,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 74
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "93/94 decided PRs merged",
                "points": 37.8,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 93,
                      "decided": 94
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/27 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 45,
            "inputs": {
              "followers": 4,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "rocne",
              "public_repos": 17,
              "account_age_days": 3924
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "4 followers of rocne",
                "points": 5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 4,
                      "login": "rocne"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "17 public repos, account ~10 yr old",
                "points": 21.1,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 17
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 10
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/rocne/dstow"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 3
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 3 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "10 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 76,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "7 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 50,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 4
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/27 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "8 existing vulnerabilities detected",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 16 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 16
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 89,
            "inputs": {
              "source": "osv",
              "advisories": 9,
              "affected_packages": 2,
              "assessed_packages": 16,
              "unassessed_packages": 0,
              "affected_by_severity": "moderate 1, unknown 1",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: golang.org/x/sys v0.43.0 (unknown)",
                "points": 26.6,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "golang.org/x/sys v0.43.0 (unknown)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 16,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "excellent",
        "name": "AI Readiness",
        "value": 88,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 2248
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "88 of 88 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 88,
                      "sampled": 88
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.8,
              "toolchain_manifests": [
                "go.mod",
                "internal/ui/themes/cargo.toml"
              ],
              "dependency_bot_commit_share": 0.02
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "go.mod, internal/ui/themes/cargo.toml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "go.mod, internal/ui/themes/cargo.toml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "80 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 80,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "2 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 2,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 24858,
              "source_files_sampled": 124,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/124 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 124,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [],
  "report_type": "repository",
  "generated_at": "2026-07-29T17:27:32.711688Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/rocne/dstow.svg",
  "full_name": "rocne/dstow",
  "license_state": "standard",
  "license_spdx": "GPL-3.0"
}